I have been using Windows Embedded (now IoT) since XP embedded for systems manufactured by my company. We are currently using Windows IoT Enterprise 2019 with UWF enabled. I would like to enable Windows Defender on the systems, but it writes into the "ProgramData\Microsoft\Windows Defender" folder every time it updates or runs a scan. I have this folder Excluded from the overlay, but since the overlay still grows with excluded files the overlay completely fills up after about a week of scans.
Microsoft's recommendation is to use junction points instead of exclusions, however Windows Defender protects this folder and does not allow it to be moved. I have also looked to see if the defender folder can be changed in a registry key, but I was not successful.
Has anyone else dealt with and resolved this issue?